Forum Discussion
OneLake security roles via REST API not syncing to SQL analytics endpoint
Hi sglen ,
Based on your findings, this behavior appears to indicate a synchronization gap between OneLake security Data Access Roles applied via API and the SQL Analytics endpoint.
While the PUT /dataAccessRoles API successfully updates the OneLake security metadata as confirmed via the List API, the corresponding role membership is not being propagated to the SQL Analytics endpoint. This is evident from the absence of entries in sys.database_role_members, despite the roles themselves being created.
In contrast, making any modification through the OneLake Security UI triggers an internal process that correctly synchronizes role memberships to the SQL endpoint. This suggests that the UI invokes an additional backend sync mechanism that is currently not triggered by API operations.
Additionally, there is currently no documented API or supported method to explicitly trigger the OneLake > SQL endpoint security sync.
We recommend raising a Microsoft Fabric support ticket with the relevant details workspace, lakehouse, timestamps, and reproduction steps so this can be investigated further by the product team and addressed appropriately.
Please refer below link on how to raise a contact support or support ticket.
How to create a Fabric and Power BI Support ticket - Power BI | Microsoft Learn
Regards,
Community Support Team.